Tighten Dependabot PR limits

[marioledger]

Summary

• Lower Dependabot open PR limit from 5 to 4 for npm and GitHub Actions
• Apply the existing dependencies and maintenance labels to Dependabot PRs

Validation

• ruby -e "require \"yaml\"; ..." confirms the YAML parses and the expected values are present

Summary by CodeRabbit

• Chores
  • Updated dependency management automation configuration to optimize pull request handling and add organizational labels.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 7c16df11-0653-4478-b38a-7c3ba0d072c7

📥 Commits

Reviewing files that changed from the base of the PR and between 5b955ce and 163d291.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

📝 Walkthrough

Walkthrough

.github/dependabot.yml is updated to lower the open-pull-requests-limit from 5 to 4 for both the npm and github-actions ecosystems, and to attach dependencies and maintenance labels to all generated Dependabot pull requests.

Changes

Dependabot Configuration Update

Layer / File(s)	Summary
PR limit and labels for both ecosystems .github/dependabot.yml	open-pull-requests-limit reduced from 5 to 4 and labels: [dependencies, maintenance] added for both the npm and github-actions update ecosystems.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• marioledger/OpenAEO#25: Also modifies .github/dependabot.yml for the github-actions ecosystem, touching overlapping configuration fields (labels and PR limit).

Poem

A bunny hopped in, trimmed PRs to four,
And stamped each one with a label or more.
"dependencies" here, "maintenance" there,
Dependabot's tidy — a organized affair!
🐇✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: reducing Dependabot's open PR limits from 5 to 4, which is the primary modification in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch maint/dependabot-labels-pr-cap

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}